social-auth-kerberos 0.2.3

Kerberos authentication backend for Python Social Auth

Introduction

This package provides Kerberos backend for Python Social Auth. It can be used to enable passwordless authentication inside a Django app or any other application that supports Python Social Auth. This is a pure Python implementation which doesn’t depend on Apache mod_auth_kerb.

To install:

pip install social-auth-kerberos

Then configure PSA and add the following settings:

AUTHENTICATION_BACKENDS = [
    'social_auth_kerberos.backend.KerberosAuth',
    'django.contrib.auth.backends.ModelBackend',
]

SOCIAL_AUTH_KRB5_KEYTAB = '/tmp/your-application.keytab'

For more information about Kerberos see:

• How to configure Firefox for kerberos
• How to configure kerberos on Fedora
• How to generate a keytab file

Warning

USE AT YOUR OWN RISK!

This module has been tested manually with Kiwi TCMS. Automated tests do not exist because we can’t quite figure out how to use gssapi-console as part of unit tests! If you do figure it out a pull request will be greatly appreciated!

Changelog

v0.2.3 (22 Mar 2020)

• Keep a reference to current user before checking anything else. Resolves a crash for clients which know that the server is Kerberos enabled and directly send the Authorization header
• Be more tolerant to authorization request headers which don’t match RFC-4459, section 4.2

v0.2.2 (10 Nov 2019)

• Pin license version to GPLv2 for Tidelift

v0.2.1 (10 Dec 2018)

• Initial release